To view parent comment, click here.
To read all comments associated with this story, please click here.
No that doesn't answer my question because you could have PCI compliance without dependence on a specific web server version. It also doesn't explain why a shopping cart needs the latest PHP.
Most LAMP software lacks data abstraction layers and backwards compatibility. Why is it so hard to admit this? It's not like Linux is threatened on web servers.
Sorry, I thought it would be obvious. In software like Apache web server and PHP, vulnerabilities are found nearly every day, necessitating patches and new versions to be put out by the developers. I for one would certainly not want to be running a web app like Zen Cart, which is responsible for handling customer's private data and in some cases financial records, on older, unpatched software.
Perhaps you are working in the wrong field?





Member since:
2005-06-29
Zencart (one of the top shopping carts)
Zen Cart v1.5.0
Minimum server requirements:
PHP 5.2.14 or higher, or PHP 5.3.5 or higher.
Apache 2.x or newer (Specifically the latest PCI Compliant version)
PHP 5.2.14 came out in 2010. Why should a shopping cart be dependent on the latest version of PHP and a specific series of a web server?
You answered your own question in your example: PCI Compliance. I'm dealing with this exact issue with a client right now. I've almost convinced her to leave Zen Cart behind for a sane solution, but she has a love/hate relationship with it; she loves the power and flexibility, but loathes the compliance issues. If it weren't for the PCI Compliance nightmare, I'd be content to support her Zen Cart instance, but it's making us both pull our hair out.